Clarify wording around blocking 3rd party cookies and add lab to block reading of 3rd party cookies

Clarify wording around blocking 3rd party cookies and add lab to block reading of 3rd party cookies

BUG=69066
TEST=net_unittests

Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=71148

[jochen (gone - plz use gerrit), 2011-01-11 09:36:23]

please review

[Randy Smith (Not in Mondays), 2011-01-11 18:38:42]

LGTM, with the one suggestion below (which you're welcome to use your own
judgment on).

One question, which shows my ignorance, but might end it: What exactly are third
party cookies?

http://codereview.chromium.org/6207005/diff/1/net/base/static_cookie_policy.h
File net/base/static_cookie_policy.h (right):

http://codereview.chromium.org/6207005/diff/1/net/base/static_cookie_policy.h...
net/base/static_cookie_policy.h:36: BLOCK_ALL_THIRD_PARTY_COOKIES
This section seems a bit awkward to me; the combination of the ordering (which I
understand is enforced for versioning purposes) and the block all cookies
comment being very short makes this a bit confusing.  Maybe change "Disable
cookies." to "Disable all cookies (third party or not) from being set or read."?

[jochen (gone - plz use gerrit), 2011-01-11 20:57:54]

On 2011/01/11 18:38:42, rdsmith wrote:
> LGTM, with the one suggestion below (which you're welcome to use your own
> judgment on).
> 
> One question, which shows my ignorance, but might end it: What exactly are
third
> party cookies?

third-party refers to the context in which the cookie is used, e.g. if you go to
www.example.com that includes data from somewhere.org in e.g. an iframe, then a
cookie on example.com is a first-party cookie while a cookie for somewhere.org
would be a third-party cookie.

If you go, however, directly to somewhere.org its cookies are suddenly
first-party cookies.